CVE-2016-10308

Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device's web interface and grants access to the underlying embedded Linux OS on the device, allowing full control over it.

• CWE-798

• http://blog.iancaling.com/post/145309944453Exploit, Third Party Advisory
• http://www.securityfocus.com/bid/97243Third Party Advisory, VDB Entry
• http://blog.iancaling.com/post/145309944453Exploit, Third Party Advisory
• http://www.securityfocus.com/bid/97243Third Party Advisory, VDB Entry

Published

Mar 30, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-10299An elevation of privilege vulnerability in Qualcomm closed s…
• CVE-2016-1030Adobe Flash Player before 18.0.0.343 and 19.x through 21.x b…8.1
• CVE-2016-10304The SAP EP-RUNTIME component in SAP NetWeaver AS JAVA 7.5 al…6.5
• CVE-2016-10305Trango Apex <= 2.1.1, ApexLynx < 2.0, ApexOrion < 2.0, ApexP…9.8
• CVE-2016-10306Trango Altum AC600 devices have a built-in, hidden root acco…
• CVE-2016-10307Trango ApexLynx 2.0, ApexOrion 2.0, GigaLynx 2.0, GigaOrion …9.8
• CVE-2016-10309In the GUI of Ceragon FibeAir IP-10 (before 7.2.0) devices, …
• CVE-2016-1031Use-after-free vulnerability in Adobe Flash Player before 18…8.8
• CVE-2016-10310Buffer overflow in the MobiLink Synchronization Server compo…
• CVE-2016-10311Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5…
• CVE-2016-10312Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (R…
• CVE-2016-10313Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (R…